Display Your Logo in the Inbox: Audit Your BIMI Readiness
BIMI is the reward for strong email security. It lets you show your logo in the inbox. Check your record, logo file, and DMARC rules with one API call.
Start with a free audit for a quick check. Use the Pro audit to see all issues and get a step-by-step plan to get your logo displayed.
Overview
Veldica checks BIMI in the context that matters: DMARC enforcement, DNS syntax, and the supporting transport-security signals that decide whether a logo rollout is actually ready.
Teams who want their logo in Gmail and Apple Mail but need help with the technical rules.
BIMI requires a strong DMARC policy like p=reject. Veldica checks both in one run.
Most tools only check your BIMI record. Veldica checks everything needed for your logo to actually show up.
BIMI Readiness Checklist
Setting up BIMI takes more than just one DNS record. You need all your security settings to work together.
- Verify your DMARC policy is strong enough for BIMI.
- Check for your
default._bimirecord at your root domain. - Check that your logo URL is secure and use the right file type.
- Verify your certificate if you are using a VMC.
- Confirm your logo file matches the strict BIMI size and type rules.
Why BIMI Fails
BIMI usually fails because of a weak DMARC policy or a broken logo file link.
- Weak Policy: A valid BIMI record will fail if your DMARC is only in "monitor mode".
- Logo Links: If your logo isn't hosted securely or uses the wrong file type, it won't show up.
- File Rules: BIMI requires a very specific SVG type that takes careful validation.
- Scaling: Managing logos across many domains needs an automated audit, not manual checks.
Programmatic Brand Verification
Automate the verification of your brand identity across your entire domain portfolio.
Check DMARC in one tool, BIMI in another, and curl the logo URL manually.
Submit one request and receive a structured audit of both BIMI and its DMARC requirements.
Receive machine-readable findings like bimi.invalid or dmarc.policy.none.
Send SVG requirements to design and DNS requirements to IT with a single validated report.
BIMI Readiness Audit
Use the Pro audit endpoint to validate a specific domain's BIMI and DMARC readiness.
curl -H 'content-type: application/json' \
-H 'X-RapidAPI-Key: YOUR_RAPIDAPI_KEY' \
-H 'X-RapidAPI-Host: email-domain-trust-auditor.p.rapidapi.com' \
-X POST 'https://email-domain-trust-auditor.p.rapidapi.com/v1/pro/audits/domain' \
-d '{
"domain": "veldica.com",
"check_bimi": true
}'Ensure check_bimi: True is included in your request for the most thorough logo-hosting audit.
Verified response
Audit output showing a BIMI record blocked by weak DMARC policy.
{
"domain": "veldica.com",
"score": 45,
"grade": "C",
"risk": {
"risk_level": "high",
"enforcement_status": "none",
"assessment_confidence": "high"
},
"findings": [
{
"id": "bimi.pass",
"check": "bimi",
"status": "pass",
"severity": "low",
"title": "BIMI Syntax Valid",
"fix": null
},
{
"id": "dmarc.policy.none",
"check": "dmarc",
"status": "fail",
"severity": "critical",
"title": "DMARC Policy: None (Monitor Only)",
"fix": "BIMI requires p=quarantine or p=reject to display your logo in most clients."
}
],
"recommendations": [
"Advance DMARC to at least p=quarantine to enable BIMI display.",
"Verify the logo SVG matches the Tiny PS profile."
]
}DNS templates for enabling BIMI via DMARC enforcement.
{
"domain": "veldica.com",
"template_remediations": [
{
"issue_id": "dmarc.policy.none",
"priority": "p1",
"dns_name": "_dmarc.veldica.com",
"operation": "replace",
"proposed_value_template": "v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@veldica.com",
"rationale": "Increase DMARC enforcement to enable BIMI logo display."
}
]
}Interpreting BIMI Findings
Interpret the BIMI result as a validation of brand readiness and trust maturity.
- Check Findings: Look for
bimi.pass. If this passes butdmarc.policy.noneis present, BIMI will not display. - Validate Logo: Look for
bimi.invalid. This often means thel=tag is missing or points to a non-HTTPS resource. - Trust Score: BIMI contributes to the overall trust score as a signal of mature domain management.
- Fix Plan: Use the
fix-planto generate the exact DMARC and BIMI records needed for enforcement.
Production Usage: BIMI Rollout
This is how a brand team moves from monitoring to full BIMI enforcement using the API.
- Run a Pro audit to identify the current DMARC enforcement gap.
- Use the
fix-planto upgrade DMARC top=quarantineacross the portfolio. - Generate the BIMI
proposed_value_templateonce DMARC is stable. - Host the SVG logo and use the API to verify the HTTPS certificate and URL validity.
- Automate weekly audits to ensure no DNS changes have broken the BIMI-DMARC alignment.
const audit = await veldica.proAudit('veldica.com', { check_bimi: true });
if (audit.findings.some(f => f.id === 'dmarc.policy.none')) {
console.log('BIMI will not display: DMARC policy is none.');
const plan = await veldica.getFixPlan('veldica.com');
// Route plan.template_remediations to IT desk...
}Tool Comparison: BIMI Validation
How Veldica compares to manual brand check tools.
Excellent for manual checks. Difficult to use for bulk portfolio monitoring or API integrations.
Only validates record presence. Ignores critical DMARC enforcement and HTTPS hosting requirements.
The only API that scores BIMI in the context of DMARC enforcement and transport security.
Keep Exploring
Use the Workflow Library to browse more guides, comparisons, and integration examples to continue your evaluation.
See the solutions, comparisons, and integration guides collected in one place.
Review grounded audit, compare, fix-plan, and report excerpts before you wire the API into anything.
Jump from the workflow page into the quickstart, endpoint guides, and full OpenAPI reference.
Get your logo in the inbox
Start by auditing your BIMI readiness with the free endpoint, or use Pro for the full DMARC and SVG validation path.